Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2131244C53511F185E8F0BBCE1D38B0.roa
File:                     B2131244C53511F185E8F0BBCE1D38B0.roa (raw, json)
Hash identifier:          250jqZzTULEET/Lut0xf3QCpPCfuAs1jzbaZsy5OhLw=
Subject key identifier:   39:B1:D5:63:6D:45:D5:0A:72:62:4E:1A:16:40:63:99:03:3F:12:FA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2131244C53511F185E8F0BBCE1D38B0.roa
Signing time:             Sun 11 Oct 2026 05:36:24 +0000
ROA not before:           Sun 11 Oct 2026 05:36:19 +0000
ROA not after:            Wed 11 Nov 2026 05:36:19 +0000
asID:                     401362
IP address blocks:        154.210.13.0/24 maxlen: 24
                          154.210.14.0/24 maxlen: 24
                          154.210.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126328 (0x1ed78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 11 05:36:19 2026 GMT
            Not After : Nov 11 05:36:19 2026 GMT
        Subject: CN=6acb2058-99d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:a2:37:6c:ce:1d:6f:ad:dd:96:40:2a:a4:
                    4e:a3:1c:f7:e8:a8:02:8e:2f:af:0f:4a:11:46:34:
                    8a:14:7c:fc:4f:48:fb:07:23:b1:f1:43:99:44:94:
                    ce:05:89:50:fb:5a:7a:8b:fe:2a:da:45:b7:f8:31:
                    66:17:28:05:cc:07:87:89:ed:78:52:24:62:e8:b5:
                    78:7d:96:70:1d:25:69:d8:8a:f3:23:24:ed:a3:77:
                    ee:c4:8c:ee:04:37:19:2c:85:2b:24:e9:4c:c2:d9:
                    d7:d3:51:a2:b7:7a:3c:f4:70:82:80:23:8f:a6:0f:
                    a0:17:51:19:21:f1:a5:5a:13:d1:6b:9a:3b:31:f2:
                    69:d2:b2:63:e8:9f:00:ea:1f:c8:a6:71:63:9e:fd:
                    c7:11:19:bd:72:bf:ec:4e:a0:62:f9:b7:a6:a0:de:
                    dc:c7:d0:c1:9b:00:d6:2d:93:d1:4e:e7:8c:f7:d5:
                    84:0c:d2:8d:cf:05:af:89:71:b3:50:28:0a:f0:79:
                    66:01:2d:db:24:6d:e4:ca:e0:7b:a8:fd:c8:e9:74:
                    02:b8:88:9b:97:0f:88:b5:40:9e:c4:9b:cf:16:84:
                    4d:32:9b:47:3b:9e:8b:52:87:1c:4f:34:c7:c7:60:
                    4c:e8:8b:c3:18:a5:02:cf:a5:75:5a:70:04:9e:44:
                    00:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B1:D5:63:6D:45:D5:0A:72:62:4E:1A:16:40:63:99:03:3F:12:FA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2131244C53511F185E8F0BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.13.0-154.210.14.255
                  154.210.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:54:a4:9c:c2:cb:aa:ed:82:51:4a:45:f1:19:4d:b6:a1:be:
         ba:83:f9:bc:8c:ec:c5:45:f2:b7:74:ff:d9:ce:ca:d5:37:66:
         94:6f:1b:03:5f:f1:31:71:98:fa:60:da:5f:c7:64:db:9a:7f:
         c0:85:c6:fe:c5:c3:14:5f:7a:23:e4:aa:5f:f0:98:f1:8a:f9:
         1b:fd:53:60:52:b0:0c:32:71:e7:86:cf:98:46:a6:f7:90:5c:
         05:48:92:ce:8a:bc:16:47:99:ba:33:b1:e4:9c:d7:5f:f1:85:
         16:e8:13:cc:34:4e:02:14:bb:b5:7d:d4:15:9f:4d:b9:28:d9:
         44:40:33:78:ab:9e:96:e7:25:66:01:84:55:7b:41:09:31:e0:
         5a:09:5c:56:12:6c:fb:dc:f6:8c:c5:cb:57:10:13:5d:f2:05:
         04:75:35:2a:aa:ac:ba:b4:f1:a9:b1:06:12:46:95:ae:ee:c1:
         3d:bb:84:3e:c5:23:ab:26:1b:ae:67:de:ec:7c:9c:05:4f:18:
         6c:64:9c:fb:d3:88:f3:e8:38:72:f8:4d:54:75:c3:cc:2c:45:
         36:5d:9f:cf:47:b0:a2:93:a8:3b:1d:03:0b:9f:f2:2e:f7:a8:
         c3:0a:c1:96:c6:2e:21:bb:f6:ad:e9:f0:97:b9:40:39:3f:eb:
         7f:c9:e3:9c
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAe14MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDExMDUzNjE5WhcNMjYxMTExMDUzNjE5WjAYMRYw
FAYDVQQDEw02YWNiMjA1OC05OWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo3iiN2zOHW+t3ZZAKqROoxz36KgCji+vD0oRRjSKFHz8T0j7ByOx8UOZ
RJTOBYlQ+1p6i/4q2kW3+DFmFygFzAeHie14UiRi6LV4fZZwHSVp2IrzIyTto3fu
xIzuBDcZLIUrJOlMwtnX01Git3o89HCCgCOPpg+gF1EZIfGlWhPRa5o7MfJp0rJj
6J8A6h/IpnFjnv3HERm9cr/sTqBi+bemoN7cx9DBmwDWLZPRTueM99WEDNKNzwWv
iXGzUCgK8HlmAS3bJG3kyuB7qP3I6XQCuIiblw+ItUCexJvPFoRNMptHO56LUocc
TzTHx2BM6IvDGKUCz6V1WnAEnkQACQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFDmx
1WNtRdUKcmJOGhZAY5kDPxL6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMjEzMTI0NEM1MzUxMUYxODVFOEYwQkJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACa0g0DBACa0g4DBACa
0nowDQYJKoZIhvcNAQELBQADggEBACtUpJzCy6rtglFKRfEZTbahvrqD+byM7MVF
8rd0/9nOytU3ZpRvGwNf8TFxmPpg2l/HZNuaf8CFxv7FwxRfeiPkql/wmPGK+Rv9
U2BSsAwyceeGz5hGpveQXAVIks6KvBZHmbozseSc11/xhRboE8w0TgIUu7V91BWf
Tbko2URAM3irnpbnJWYBhFV7QQkx4FoJXFYSbPvc9ozFy1cQE13yBQR1NSqqrLq0
8amxBhJGla7uwT27hD7FI6smG65n3ux8nAVPGGxknPvTiPPoOHL4TVR1w8wsRTZd
n89HsKKTqDsdAwuf8i73qMMKwZbGLiG79q3p8Je5QDk/63/J45w=
-----END CERTIFICATE-----